Test ID:	1.3.6.1.4.1.25623.1.0.811959
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Multiple Vulnerabilities (HT208221)
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - A logic issue existed in the handling of state transitions. - A path handling issue. - A validation issue existed which allowed local file access. - An out-of-bounds read. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary code with system privileges and disclose sensitive information. Affected Software/OS: Apple Mac OS X version 10.13, 10.12.x through 10.12.6 prior to Security Update 2017-001 Sierra, 10.11.x through 10.11.6 prior to Security Update 2017-004 El Capitan. Solution: Upgrade to Apple Mac OS X version 10.13.1 or apply the appropriate patch. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1000100 BugTraq ID: 100286 http://www.securityfocus.com/bid/100286 Debian Security Information: DSA-3992 (Google Search) http://www.debian.org/security/2017/dsa-3992 https://security.gentoo.org/glsa/201709-14 RedHat Security Advisories: RHSA-2018:3558 https://access.redhat.com/errata/RHSA-2018:3558 http://www.securitytracker.com/id/1039118 Common Vulnerability Exposure (CVE) ID: CVE-2017-1000101 BugTraq ID: 100249 http://www.securityfocus.com/bid/100249 http://www.securitytracker.com/id/1039117 Common Vulnerability Exposure (CVE) ID: CVE-2017-13801 http://www.securitytracker.com/id/1039710 Common Vulnerability Exposure (CVE) ID: CVE-2017-13804 http://www.securitytracker.com/id/1039703 Common Vulnerability Exposure (CVE) ID: CVE-2017-13077 BugTraq ID: 101274 http://www.securityfocus.com/bid/101274 CERT/CC vulnerability note: VU#228519 http://www.kb.cert.org/vuls/id/228519 Cisco Security Advisory: 20171016 Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa Debian Security Information: DSA-3999 (Google Search) http://www.debian.org/security/2017/dsa-3999 FreeBSD Security Advisory: FreeBSD-SA-17:07 https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.asc https://security.gentoo.org/glsa/201711-03 https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt https://www.krackattacks.com/ https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html RedHat Security Advisories: RHSA-2017:2907 https://access.redhat.com/errata/RHSA-2017:2907 RedHat Security Advisories: RHSA-2017:2911 https://access.redhat.com/errata/RHSA-2017:2911 http://www.securitytracker.com/id/1039573 http://www.securitytracker.com/id/1039576 http://www.securitytracker.com/id/1039577 http://www.securitytracker.com/id/1039578 http://www.securitytracker.com/id/1039581 http://www.securitytracker.com/id/1039585 http://www.securitytracker.com/id/1041432 http://www.ubuntu.com/usn/USN-3455-1 Common Vulnerability Exposure (CVE) ID: CVE-2017-13078 SuSE Security Announcement: SUSE-SU-2017:2745 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html SuSE Security Announcement: SUSE-SU-2017:2752 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html SuSE Security Announcement: openSUSE-SU-2017:2755 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html Common Vulnerability Exposure (CVE) ID: CVE-2017-13080 https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html http://www.securitytracker.com/id/1039572 Common Vulnerability Exposure (CVE) ID: CVE-2017-7170
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.